Threats affecting pkg:github/a2ui-project/a2ui

CVE-2026-92217 is a medium severity vulnerability in the a2ui-project a2ui component up to version 0.10.6. It affects the processMessages function in the message-processor.ts file, causing dynamically-determined object attributes. The vulnerability can be exploited remotely and was reported to the project, which has not yet responded or issued a fix.

CVE-2026-92216 is an open redirect vulnerability in the a2ui-project's a2ui component, specifically affecting the openUrl function in the Binder component. This vulnerability exists in versions 0.10.0 through 0.10.7 and allows remote attackers to manipulate URLs to redirect users to unintended destinations. The issue was reported to the project early, but no response or fix has been issued yet. The vulnerability has a medium severity rating with a CVSS score of 5.3.

CVE-2026-92215 is a server-side request forgery (SSRF) vulnerability in the a2ui-project a2ui software up to version 0.10.7. The flaw exists in the httpx.get function within the FileResolver component, allowing remote attackers to manipulate requests. This vulnerability has a medium severity rating with a CVSS score of 6.9. A patch identified by commit 2bb8423060308bbdea8ba468dabed4fc256d18ea is recommended to remediate the issue.

A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/client/angular/projects/a2a-chat-canvas/src/lib/services/sanitizer-markdown-renderer-service.ts of the component a2a-chat-canvas. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote.

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be launched remotely.

CVE-2026-92213 is a medium severity injection vulnerability in the a2ui-project a2ui component versions 0.10.0 through 0.10.6. It affects the Angular Renderer function z.any in the file renderers/web_core/src/v0_9/schema/server-to-client.ts. The vulnerability allows remote attackers to perform injection by manipulating the argument primaryColor. A patch identified by commit fb8e85aec78d04e81feb9992a57638ca1ec4dc1b is available to address this issue.